Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier: +L8mFi0js+g2s1xKh6LgjPv3uiIKm45Y2Ye5XB94Jvs=
Subject key identifier: A8:D1:45:E5:7E:B7:CF:DE:C4:26:B1:CA:FB:A5:B8:A8:31:1F:62:FE
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 0197B6A244F6F6236D7F43144E76033D59F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number: 05A8
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: N7BEMQ6+GHPVR55MlDjQ9Vnt76DStVDH//+6M9JfghU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:f6:f6:23:6d:7f:43:14:4e:76:03:3d:59:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=a8d145e57eb7cfdec426b1cafba5b8a8311f62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:82:b8:c0:ca:e6:e1:b2:a8:cb:d3:3d:6f:
d4:1d:57:99:93:e0:ed:43:fc:d5:78:02:ae:8d:66:
85:64:88:ac:6f:f7:7d:cb:f3:d4:f0:3b:32:6c:93:
52:97:04:12:0c:f7:16:2b:00:17:e8:a1:05:eb:83:
21:4c:7d:ce:86:c3:3b:0f:d3:3e:f1:45:a9:7d:ca:
e5:09:3e:b0:e1:c8:a1:8b:c9:27:a4:fd:1c:bb:cb:
b1:e0:ab:b2:bb:53:38:5a:86:ab:ab:4b:10:e5:86:
28:b1:72:2a:86:7f:39:ca:4d:f9:bc:1b:45:7c:fb:
77:d8:a4:06:74:aa:e9:49:75:46:d3:87:1e:b2:f4:
37:d6:a4:09:96:98:20:93:c0:92:25:1d:12:7c:3d:
a6:5e:aa:2f:c9:c4:30:5f:bb:21:b5:e6:24:f7:9f:
62:34:e1:4f:54:aa:14:82:d8:34:f9:22:e7:9d:09:
5b:46:22:6b:61:21:90:ce:76:c9:62:f9:50:1b:4a:
02:c2:96:89:0c:0d:c9:0e:b3:ed:c1:5c:f6:1b:2f:
61:59:bf:1d:04:28:df:5d:20:25:8f:ea:60:1f:ca:
22:d8:06:2a:a9:c0:7f:86:a4:e2:2a:66:8b:36:c9:
6b:c5:66:26:89:09:d0:a6:3f:3d:c1:2f:d4:0e:c4:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:45:E5:7E:B7:CF:DE:C4:26:B1:CA:FB:A5:B8:A8:31:1F:62:FE
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:f5:b0:dd:ed:4c:db:fb:49:77:6a:8b:18:43:6b:42:c2:
04:32:9f:45:5f:12:22:6c:cb:40:d4:d2:fb:30:1a:89:a1:1e:
c4:f3:da:1d:e0:b1:c9:0f:fe:05:5f:97:10:57:02:82:99:af:
9b:75:df:90:5a:57:cc:e6:af:fa:09:e1:92:6d:31:61:db:f6:
a0:77:59:20:4b:cf:2e:65:3b:14:f5:57:1a:40:9c:5c:ac:0d:
55:ec:09:66:ed:b1:d8:d7:05:29:97:76:2a:bb:04:6a:b2:61:
5f:96:0d:ee:13:00:9f:e7:20:52:23:6e:fd:02:e9:95:fd:73:
1f:c5:eb:f3:12:4c:51:87:1b:cc:d2:15:70:06:d6:5a:16:53:
08:9a:eb:d5:3d:96:39:82:26:13:d5:ea:c9:1b:5c:4b:b9:0a:
68:d2:31:94:64:69:cf:a2:c4:16:d8:3c:c1:38:a9:43:cb:ce:
a0:38:1d:f3:2d:51:9d:a0:fd:94:22:b4:04:8f:1a:aa:6c:f4:
56:db:64:5d:6e:11:d6:ac:9b:af:ac:d7:13:9f:d9:28:6c:a8:
6e:4d:82:93:23:01:91:c2:f6:f8:4b:a8:61:e5:3b:6d:55:b1:
19:f0:ed:11:d9:ab:f6:2d:d7:8f:cd:09:86:e5:fa:22:7b:ff:
65:2c:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:58 2025 by rpki-client